$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa File: 67d08315-be33-31ec-8f60-ad77e5ab1a41.roa (raw, json) Hash identifier: mhwmPQ5jA7qQe8mHV6lfDFzBs8zOJa6bADICOYxO3eU= Subject key identifier: 25:31:DE:73:34:4E:6D:F4:0A:3C:52:00:49:75:02:49:CD:42:96:63 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C43E94A0E9C496278E9B80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 151.101.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:3e:94:a0:e9:c4:96:27:8e:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ffcb5124-a3b2-4be2-909f-f3f6e26f3659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:6b:fd:21:e0:38:ef:c5:b2:70:9d:03:0f: ae:c6:bc:fa:73:a6:04:d4:f4:5d:83:85:c8:a6:59: 20:11:0d:83:5e:3c:3e:c4:8b:18:48:dc:7d:6f:c7: cd:b8:00:b2:a1:51:57:75:da:8f:77:ee:18:07:31: 40:4b:62:b9:ff:62:a8:9e:9b:de:2e:cc:d5:9c:f8: 73:fa:56:d1:48:48:45:da:07:53:3b:0e:b8:25:0b: 08:f5:37:fc:6d:c3:7f:c9:de:96:99:bd:b7:2d:07: 8c:11:c0:d7:44:c4:a8:a5:37:8b:27:be:da:51:d0: 0e:34:92:55:0b:d4:64:be:43:6d:f7:b4:b7:0a:52: 48:c4:b7:73:27:fc:18:fe:ff:ed:83:90:85:d8:31: 61:94:eb:a4:42:24:1e:b5:f4:d2:07:dc:10:59:90: 5d:1c:11:f0:6e:13:8b:4e:49:ca:31:70:9b:a5:b2: 88:56:8c:34:d8:49:d4:3c:73:a9:6c:cc:86:07:88: 13:05:05:77:7e:08:32:ad:2e:68:e0:d9:40:4f:77: 20:65:5c:4d:1d:ae:cf:0f:c0:ab:10:16:88:31:1c: 97:8c:59:55:ea:3b:9c:67:35:fa:3f:b0:0d:74:4c: 71:64:ec:a0:64:77:48:ed:41:a9:67:be:96:81:6e: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:DE:73:34:4E:6D:F4:0A:3C:52:00:49:75:02:49:CD:42:96:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/67d08315-be33-31ec-8f60-ad77e5ab1a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:39:8c:75:9b:e7:cd:56:e6:ee:02:a9:2b:e2:fa:6a:59: c4:90:28:59:f4:d9:21:5b:8c:0e:0e:d3:47:13:aa:e6:df:52: 88:28:7b:f1:4b:f0:a0:ea:83:6c:50:4d:1b:ef:b6:08:c0:0a: d4:ea:64:99:8d:e3:d4:68:6a:e7:a4:bd:32:79:52:ff:eb:f4: 81:09:c7:e2:c8:9a:df:45:15:de:67:ff:0c:4e:20:98:22:a2: 89:07:92:a1:51:13:ac:94:8f:a4:93:28:6c:fe:b8:ac:18:2e: 9b:96:d2:ba:09:46:43:0c:9d:6f:82:40:4e:cc:95:e4:1d:8b: 89:1a:f2:c4:50:a3:91:08:ea:bb:35:43:9c:0a:1a:db:99:63: 36:8f:c4:0f:11:9f:f1:76:4e:b6:6e:9a:4c:34:cf:d8:39:78: 07:6d:35:ed:2e:18:e5:cd:53:00:dd:6e:86:c9:47:35:b7:01: 3b:15:9a:e1:0a:13:89:6c:1c:28:c1:34:0e:56:6b:1a:72:5e: 52:30:d6:98:f9:6f:e2:73:62:9b:4b:5c:20:8b:2b:dd:35:c5: d2:a0:d0:02:87:47:bc:8c:59:3a:0d:69:04:14:09:07:9e:43: 99:b4:8a:a0:53:80:b9:08:5d:c1:b3:d8:f1:52:ed:ef:ed:fb: 2e:96:0b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxD6UoOnElieOm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmZjYjUxMjQtYTNiMi00YmUyLTkwOWYtZjNmNmUyNmYzNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ9r/SHgOO/FsnCdAw+uxrz6c6YE1PRdg4XI plkgEQ2DXjw+xIsYSNx9b8fNuACyoVFXddqPd+4YBzFAS2K5/2KonpveLszVnPhz +lbRSEhF2gdTOw64JQsI9Tf8bcN/yd6Wmb23LQeMEcDXRMSopTeLJ77aUdAONJJV C9RkvkNt97S3ClJIxLdzJ/wY/v/tg5CF2DFhlOukQiQetfTSB9wQWZBdHBHwbhOL TknKMXCbpbKIVow02EnUPHOpbMyGB4gTBQV3fggyrS5o4NlAT3cgZVxNHa7PD8Cr EBaIMRyXjFlV6jucZzX6P7ANdExxZOygZHdI7UGpZ76WgW4wuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUx3nM0Tm30CjxSAEl1AknNQpZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjdkMDgzMTUtYmUzMy0z MWVjLThmNjAtYWQ3N2U1YWIxYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2VoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr1OYx1m+fNVubuAqkr4vpqWcSQKFn02SFbjA4O00cTqubfUogoe/FL 8KDqg2xQTRvvtgjACtTqZJmN49RoauekvTJ5Uv/r9IEJx+LImt9FFd5n/wxOIJgi ookHkqFRE6yUj6STKGz+uKwYLpuW0roJRkMMnW+CQE7MleQdi4ka8sRQo5EI6rs1 Q5wKGtuZYzaPxA8Rn/F2TrZumkw0z9g5eAdtNe0uGOXNUwDdbobJRzW3ATsVmuEK E4lsHCjBNA5WaxpyXlIw1pj5b+JzYptLXCCLK901xdKg0AKHR7yMWToNaQQUCQee Q5m0iqBTgLkIXcGz2PFS7e/t+y6WCwQ= -----END CERTIFICATE-----Generated at Thu Apr 3 02:59:38 2025 by rpki-client